# Cannot Stream a playlist through SSL & StreamLock

**URL:** <https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362>\
**Category:** Wowza Streaming Engine\
**Created:** [May 16, 2019, 3:53pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362 "2019-05-16T15:53:35Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Koby\_Oranski](https://avatars.discourse-cdn.com/v4/letter/k/f17d59/32.png) [@Koby\_Oranski](https://community.wowza.com/u/Koby_Oranski)\
**Post date:** [May 16, 2019, 3:53pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/1 "2019-05-16T15:53:35Z")

</div>

I have followed the instructions on setting up StreamLock but still cannot stream anything over https on the Wowza Player Builder while streaming over http works as expected. The error that is showing on the player says: “Stream unavailable. Check cross-origin policy”.

I followed all directions in here

[https://www.wowza.com/docs/how-to-get-ssl-certificates-from-the-streamlock-service](https://www.wowza.com/docs/how-to-get-ssl-certificates-from-the-streamlock-service)

And Here

[https://www.wowza.com/docs/how-to-enable-cross-origin-resource-sharing-cors-for-http-based-streams](https://www.wowza.com/docs/how-to-enable-cross-origin-resource-sharing-cors-for-http-based-streams)

At this point I am not sure if there is any setting that is missing to properly allow streaming over HTTPS and any help will be appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/system/32/447_2.png) [@system](https://community.wowza.com/u/system)\
**Post date:** [May 16, 2019, 3:55pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/2 "2019-05-16T15:55:25Z")

</div>

Make sure to use the DNS name for your StreamLock certificate as DNS does not support IP addresses.

Also make sure that both your page and the URL both use HTTPS. Mixing HTTP and HTTPS will generate a Cross Origin Resource Sharing (CORS) issue.

---

<div class="post-metadata">

**Author:** ![Koby\_Oranski](https://avatars.discourse-cdn.com/v4/letter/k/f17d59/32.png) [@Koby\_Oranski](https://community.wowza.com/u/Koby_Oranski)\
**Post date:** [May 17, 2019, 3:50pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/3 "2019-05-17T15:50:04Z")

</div>

Thanks for the reply.

Not sure that I follow. StreamLock required an IP address when setting up the certificate which I provided.

I am trying to view

[https://5cdc5669110b0.streamlock.net/LAEX/Wowza+Test.stream/playlist.m3u8](https://5cdc5669110b0.streamlock.net/LAEX/Wowza+Test.stream/playlist.m3u8)

From

[https://player.wowza.com/en/builder](https://player.wowza.com/en/builder)

both are HTTPS

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/system/32/447_2.png) [@system](https://community.wowza.com/u/system)\
**Post date:** [May 17, 2019, 3:57pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/4 "2019-05-17T15:57:24Z")

</div>

Make sure that you are pointing SSL to Wowza Streaming Engine. You likely have port 443 pointing to a web server and the name mismatch between the DNS name and the certificate is causing self signed error.  
[https://5cdc5669110b0.streamlock.net/](https://5cdc5669110b0.streamlock.net/)

Below is what you should see if your configuration was correct.  
[http://5cdc5669110b0.streamlock.net:1935/](http://5cdc5669110b0.streamlock.net:1935/)

---

<div class="post-metadata">

**Author:** ![Emanuel\_Barreto](https://avatars.discourse-cdn.com/v4/letter/e/c37758/32.png) [@Emanuel\_Barreto](https://community.wowza.com/u/Emanuel_Barreto)\
**Post date:** [August 13, 2019, 9:55pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/5 "2019-08-13T21:55:23Z")

</div>

OK, that works but I need HTTPS playback, how can I get that?

Thanks!

---

<div class="post-metadata">

**Author:** ![Emanuel\_Barreto](https://avatars.discourse-cdn.com/v4/letter/e/c37758/32.png) [@Emanuel\_Barreto](https://community.wowza.com/u/Emanuel_Barreto)\
**Post date:** [August 13, 2019, 9:57pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/6 "2019-08-13T21:57:07Z")

</div>

"Below is what you should see if your configuration was correct.

[http://5cdc5669110b0.streamlock.net:1935/](http://5cdc5669110b0.streamlock.net:1935/)"

OK, that works but is still http and https is needed! Please, help us to get that.

Thanks

---

<div class="post-metadata">

**Author:** ![David\_Gryn](https://avatars.discourse-cdn.com/v4/letter/d/5fc32e/32.png) [@David\_Gryn](https://community.wowza.com/u/David_Gryn)\
**Post date:** [September 23, 2019, 6:15pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/7 "2019-09-23T18:15:55Z")

</div>

I have the same issue. After getting a streamlock certificate and installing it this works:

http://[mystreamlock].streamlock.net:443/lives3/Stream1/playlist.m3u8

but this doesn’t

https://[mystreamlock].streamlock.net/lives3/Stream1/playlist.m3u8

https://[mystreamlock].streamlock.net:443/lives3/Stream1/playlist.m3u8

Any ideas? Thanks

---

<div class="post-metadata">

**Author:** ![Emanuel\_Barreto](https://avatars.discourse-cdn.com/v4/letter/e/c37758/32.png) [@Emanuel\_Barreto](https://community.wowza.com/u/Emanuel_Barreto)\
**Post date:** [September 23, 2019, 6:21pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/8 "2019-09-23T18:21:25Z")

</div>

Hi,

https://[mystreamlock].streamlock.net/lives3/Stream1/playlist.m3u8 worked for me.

LP

---

<div class="post-metadata">

**Author:** ![David\_Gryn](https://avatars.discourse-cdn.com/v4/letter/d/5fc32e/32.png) [@David\_Gryn](https://community.wowza.com/u/David_Gryn)\
**Post date:** [September 23, 2019, 6:39pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/9 "2019-09-23T18:39:40Z")

</div>

Thanks Emanuel. For me it doesn’t. I suspect it’s a port issue. Do you run your WSE on an Amazon EC2 server? Do you know if I have to change the inbound rules for the server in the security group?

This is what I have:

Custom TCP Rule TCP 8087 0.0.0.0/0

Custom TCP Rule TCP 8087 ::/0

Custom TCP Rule TCP 8084 - 8085 0.0.0.0/0

HTTP TCP 80 0.0.0.0/0

Custom TCP Rule TCP 1935 0.0.0.0/0

Custom TCP Rule TCP 554 0.0.0.0/0

SSH TCP 22 0.0.0.0/0

Custom TCP Rule TCP 21 0.0.0.0/0

Custom TCP Rule TCP 8086 0.0.0.0/0

Custom TCP Rule TCP 8088 0.0.0.0/0

HTTPS TCP 443 0.0.0.0/0

Custom UDP Rule UDP 6970 - 9999 0.0.0.0/0

(sorry for the bad formatting)

---

<div class="post-metadata">

**Author:** ![Emanuel\_Barreto](https://avatars.discourse-cdn.com/v4/letter/e/c37758/32.png) [@Emanuel\_Barreto](https://community.wowza.com/u/Emanuel_Barreto)\
**Post date:** [September 23, 2019, 6:42pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/10 "2019-09-23T18:42:27Z")

</div>

Hi David,

I don’t run WSE on an Amazon EC2, my CDN is in my private network.

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [September 23, 2019, 6:44pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/11 "2019-09-23T18:44:23Z")

</div>

Per tech support @David Gryn and @Emanuel Barreto

Going to the following website you can check to see if the certificate is configured correctly. In this case port 443 is used by IIS. You may be running it and WSE on the same server or using a NAT to forward ports to the appropriate server.

```auto
https://www.sslshopper.com/ssl-checker.html

```

Once there, you can input your certificate name. This is a hotlink to that website’s results for their StreamLock certificate.

```auto
https://www.sslshopper.com/ssl-checker.html#hostname=5cdc5669110b0.streamlock.net

```

You must ensure that you change the port from 443 to something like 4443 in Wowza Streaming Engine Manager, open up and forward that port to WSE, and then test to see if it works. Their StreamLock certificate URL using port 4443 would look like this.

```auto
https://www.sslshopper.com/ssl-checker.html#hostname=5cdc5669110b0.streamlock.net:4443

```

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [September 23, 2019, 6:46pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/12 "2019-09-23T18:46:26Z")

</div>

If that doesn’t work, feel free to send over a support ticket David and we’ll find the problem for you. Thanks Emanual for jumping in to try and help!

---

<div class="post-metadata">

**Author:** ![David\_Gryn](https://avatars.discourse-cdn.com/v4/letter/d/5fc32e/32.png) [@David\_Gryn](https://community.wowza.com/u/David_Gryn)\
**Post date:** [September 23, 2019, 8:23pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/13 "2019-09-23T20:23:11Z")

</div>

Thanks Rose. This has helped me identify a stupid mistake I made in the virtual host setup… Only added the path to the /conf and forgot to add the name of the certificate.

All working as it should now.

Thanks!

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [September 23, 2019, 8:24pm UTC](https://community.wowza.com/t/cannot-stream-a-playlist-through-ssl-streamlock/53362/14 "2019-09-23T20:24:36Z")

</div>

Fantastic news! Thanks for letting us know. 🙂
